When using one of the Identity Frameworks currently supporting Groups Access (Windows Security, SAML 2.0, Oauth2 OpenID Connect and Google Identity), this setting determines if the available group list will be obtained from the Provider or not, including the ability to set the provider API.
The default (Manage Group Names Here) will use the Security Group Names for Access Control to determine the group list.
Note that at this time, Windows Security, Google Identity and Azure Entra (in OpenID mode) have working API's that can query the groups.
Manage Group Names Here |
Security Group Names are defined using the Security Group Names for Access Control setting. |
Windows or Google API |
The provider API will be used to obtain the groups list. You should only check this if you have Windows Security or Google Identity active.. |
Microsoft Graph API |
Only select if you have the Oauth2 OpenID Connect as the FVTerm Access Security Type and are using it to connect to AzureAD.
Note: Steps are needed in the Azure Portal to enable the API to Query groups--see Configuration Azure OpenID for Groups Query |
